Platform Engineer - Security & Compliance
Core
Own the end-to-end compliance program (SOC 2, ISO 27001, GDPR, HIPAA, DORA) by engineering automated controls, evidence collection, and technical security measures within the platform infrastructure.
Role type
Senior DevSecOps engineer (compliance automation)
Builds
Automated compliance controls, evidence collection pipelines, and technical security hardening for cloud infrastructure
Domain
Cloud infrastructure security and regulatory compliance
Required skills
DevOps engineering, cloud infrastructure management, compliance framework implementation, infrastructure as code, CI/CD automation, scripting (Go/Python), security policy implementation, vendor risk assessment
Preferred skills
GRC platform experience, financial services compliance, vendor risk management
Technologies
Terraform, Kubernetes, GCP, AWS, Azure, GitHub Actions, Go, Python, Vanta
Responsibilities
Own compliance frameworks and run audit cycles, automate Vanta instance with custom tests, implement technical security measures across cloud providers, manage security questionnaires and trust center, conduct vendor security reviews and data protection assessments, contribute to platform reliability work
